[
https://issues.apache.org/jira/browse/HBASE-16260?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15387796#comment-15387796
]
Sean Busbey commented on HBASE-16260:
-------------------------------------
things to check, based on scanning the DEPENDENCIES files (we generate in the
apache-release profile) for "gnu" and then removing those available under both
a gnu license and an acceptable one:
hbase-examples
{code}
- XOM (http://xom.nu) xom:xom:jar:1.2.5
License: The GNU Lesser General Public License, Version 2.1
(http://www.gnu.org/licenses/lgpl-2.1.html)
From: 'http://www.beanshell.org/'
- BeanShell core org.beanshell:bsh-core:jar:2.0b4
License: GNU LESSER GENERAL PUBLIC LICENSE
(http://www.gnu.org/licenses/lgpl.txt)
{code}
hbase-external-blockcache
{code}
- XOM (http://xom.nu) xom:xom:jar:1.2.5
License: The GNU Lesser General Public License, Version 2.1
(http://www.gnu.org/licenses/lgpl-2.1.html)
From: 'http://www.beanshell.org/'
- BeanShell core org.beanshell:bsh-core:jar:2.0b4
License: GNU LESSER GENERAL PUBLIC LICENSE
(http://www.gnu.org/licenses/lgpl.txt)
{code}
hbase-it
{code}
- XOM (http://xom.nu) xom:xom:jar:1.2.5
License: The GNU Lesser General Public License, Version 2.1
(http://www.gnu.org/licenses/lgpl-2.1.html)
From: 'http://www.beanshell.org/'
- BeanShell core org.beanshell:bsh-core:jar:2.0b4
License: GNU LESSER GENERAL PUBLIC LICENSE
(http://www.gnu.org/licenses/lgpl.txt)
{code}
hbase-rest
{code}
- XOM (http://xom.nu) xom:xom:jar:1.2.5
License: The GNU Lesser General Public License, Version 2.1
(http://www.gnu.org/licenses/lgpl-2.1.html)
From: 'http://www.beanshell.org/'
- BeanShell core org.beanshell:bsh-core:jar:2.0b4
License: GNU LESSER GENERAL PUBLIC LICENSE
(http://www.gnu.org/licenses/lgpl.txt)
{code}
hbase-rsgroup
{code}
- XOM (http://xom.nu) xom:xom:jar:1.2.5
License: The GNU Lesser General Public License, Version 2.1
(http://www.gnu.org/licenses/lgpl-2.1.html)
From: 'http://www.beanshell.org/'
- BeanShell core org.beanshell:bsh-core:jar:2.0b4
License: GNU LESSER GENERAL PUBLIC LICENSE
(http://www.gnu.org/licenses/lgpl.txt)
{code}
hbase-shell
{code}
- XOM (http://xom.nu) xom:xom:jar:1.2.5
License: The GNU Lesser General Public License, Version 2.1
(http://www.gnu.org/licenses/lgpl-2.1.html)
From: 'http://www.beanshell.org/'
- BeanShell core org.beanshell:bsh-core:jar:2.0b4
License: GNU LESSER GENERAL PUBLIC LICENSE
(http://www.gnu.org/licenses/lgpl.txt)
{code}
hbase-spark
{code}
- XOM (http://xom.nu) xom:xom:jar:1.2.5
License: The GNU Lesser General Public License, Version 2.1
(http://www.gnu.org/licenses/lgpl-2.1.html)
From: 'http://www.beanshell.org/'
- BeanShell core org.beanshell:bsh-core:jar:2.0b4
License: GNU LESSER GENERAL PUBLIC LICENSE
(http://www.gnu.org/licenses/lgpl.txt)
{code}
hbase-testing-util
{code}
- XOM (http://xom.nu) xom:xom:jar:1.2.5
License: The GNU Lesser General Public License, Version 2.1
(http://www.gnu.org/licenses/lgpl-2.1.html)
From: 'http://www.beanshell.org/'
- BeanShell core org.beanshell:bsh-core:jar:2.0b4
License: GNU LESSER GENERAL PUBLIC LICENSE
(http://www.gnu.org/licenses/lgpl.txt)
{code}
hbase-thrift
{code}
- XOM (http://xom.nu) xom:xom:jar:1.2.5
License: The GNU Lesser General Public License, Version 2.1
(http://www.gnu.org/licenses/lgpl-2.1.html)
From: 'http://www.beanshell.org/'
- BeanShell core org.beanshell:bsh-core:jar:2.0b4
License: GNU LESSER GENERAL PUBLIC LICENSE
(http://www.gnu.org/licenses/lgpl.txt)
{code}
I think these all ultimately come from hbase-server, but I didn't verify that.
For whatever reason, it looks like several modules don't generate a
DEPENDENCIES file: hbase-assembly, hbase-server, and hbase-shaded*.
bigger question: why don't we have a tool to properly catch dependencies that
say they're only available under incompatible licenses?
> Audit dependencies for Category-X
> ---------------------------------
>
> Key: HBASE-16260
> URL: https://issues.apache.org/jira/browse/HBASE-16260
> Project: HBase
> Issue Type: Task
> Components: community, dependencies
> Affects Versions: 2.0.0, 1.2.0, 1.3.0, 1.2.1, 1.1.4, 1.0.4, 1.1.5, 1.2.2
> Reporter: Sean Busbey
> Assignee: Sean Busbey
> Priority: Blocker
> Fix For: 2.0.0, 1.1.6, 1.2.3
>
>
> Make sure we do not have category x dependencies.
> right now we atleast have an LGPL for xom:xom (thanks to PHOENIX-3103 for the
> catch)
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
